We process your personal data in accordance with the requirements of the General Data Protection Regulation (GDPR). In particular, we process personal data solely for lawful purposes, either in connection with a contract we have with you, subject to your consent, or on another permitted basis. We only process the minimum amount of personal data that is required for the relevant processing purpose, and we limit our processing to specific limited purposes necessary to conduct our activities. We only store your personal data as long as it is necessary for the purpose of the specific processing activity it was collected for, or for any longer period of time that we may be obligated by law to retain it.
As defined in the GDPR, “Personal data” is any information relating to an identified or identifiable natural person (a “data subject”), being a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Our Website may use “cookies” to enhance your experience. Please see our Cookies Policy, available at http://www.neopr.co.uk/cookie-policy/for further information about the cookies used on our Website and your rights in respect to same.
NeoPR uses personal data to better understand your needs and interests and to provide you with better service. Once you choose to provide us with personal data, whether through this Website or by other means in the course of our activities and interaction with you, you can be assured it will be used only as specifically detailed below, or as otherwise explicitly consented by you.
NeoPR collects, holds, and processes the following personal data on the NeoPR website:
|Source of Data||Data Subject||Data Categories Collected||Processing Purpose||Lawful Basis for Processing||Details of “legitimate interest” for processing, if applicable||Required by law/contract? If yes, consequences of failure to provide?||Recipient of Data, if applicable|
|Website (Contact Us, Document Download boxes)||Individuals who download case studies from the NeoPR website; Individuals who submit their Personal Data in the “contact us” form on the NeoPR website.||Full name, address, telephone, company name||Keeping track of requested website downloads; sending marketing emails about NeoPR’s services/business development; replying to queries on the NeoPR website “contact us” form||Legitimate Interest||Limited to: understanding who is downloading the website material, and replying to queries by members of the public.||NO||Rackspace – website hosting provider, personal data input through website is transferred to hosting provider, then to NeoPR.|
Where you have provided us with consent to process your personal data, you have the right to withdraw this consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal, however. We provide multiple, simple methods for withdrawing your consent, including, where applicable, electronic unsubscribe mechanisms. In any event, you can always inform us that you wish to withdraw your consent in respect of a specific processing activity and related personal data by emailing us at PRworks@neopr.co.uk. If you do so, please provide us with your full name, email address and sufficient details about the consent you provided, including the scope of the consent and the personal data the consent related to. We collect your name and email address in this context only for the purpose of identifying you in order to execute your consent withdrawal request.
We only retain your personal data for as long as it is necessary for the relevant processing activity, or as otherwise required by law. We also maintain detailed policies and procedures regarding how and how long we retain your personal data.
Certain NeoPR services may be linked with those from third-party companies, some which offer you the option to share personal data you provide with both NeoPR and the third party. Examples include to request communications from NeoPR marketing or solution partners. We will not share your personal data with third-party companies unless you make that choice.
Circumstances may arise where, whether for strategic or other business reasons, NeoPR decides to sell, buy, merge or otherwise reorganize businesses in some countries. Such a transaction may involve the disclosure of personal data to prospective or actual purchasers, or receiving it from sellers. It is NeoPR’s practice to seek appropriate protection for information, including personal data, in these types of transactions.
NeoPR may share your personal data with third parties acting on behalf of NeoPR, which may be located in other jurisdictions. We ensure that such transfers are lawful, including by ensuring that they are to jurisdictions that are considered to have equivalent privacy protections, and/or ensuring that the third parties to whom we transfer your personal data are under contract to NeoPR and bound by appropriate data protection clauses or other approved safeguards, as applicable in each situation.
You have certain specific rights with respect to how we process your data. NeoPR is committed to ensuring that your rights are protected. The GDPR sets out the following rights applicable to data subjects:
(a) the purposes of the processing;
(b) the categories of personal data concerned;
(c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
(d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
(f) the right to lodge a complaint with a supervisory authority;
(g) where the personal data are not collected from the data subject, any available information as to their source;
(h) the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
(i) Where personal data are transferred to a third country or to an international organisation, we will inform you of the appropriate safeguards in place in relation to the transfer.
(a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
(b) you withdraw your consent on which the processing is based and there is no other legal ground for the processing;
(c) you object to the processing and there are no overriding legitimate grounds for the processing, or you objected to the processing in respect to direct marketing;
(d) the personal data have been unlawfully processed;
(e) the personal data have to be erased for compliance with a legal obligation in EU or member country law to which our organisation is subject;
(f) the personal data have been collected in relation to the offer of information society services referred to in Article 8(1).
We cannot execute your request if the personal data you are asking us to erase is necessary:
(a) for exercising the right of freedom of expression and information;
(b) to comply with a legal obligation which requires processing under EU or a member state’s law to which we are subject, or to perform a task in the public interest or in the exercise of official authority vested in us;
(c) for certain reasons of public interest in the area of public health;
(d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as erasing the personal data is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(e) to establish, exercise or defend legal claims.
(a) you are contesting the accuracy of your personal data that we hold, while we verify the accuracy of your personal data;
(b) the way we are processing the personal data is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
(c) we no longer need the personal data for the purposes of the processing, but you need the personal data to establish, exercise or defend legal claims;
(d) you have objected to processing in the public interest or in relation to our legitimate interest, pending the verification whether any legitimate grounds we may have override your right.
While you have restricted its processing, we will only store your personal data in question, and may process it only with your consent or to establish, exercise or defend legal claims or protect the rights of another natural or legal person or for reasons of important public interest.
We will notify you before lifting the processing restriction.
(a) the processing is based on consent or on a contract; and
(b) the processing is carried out by automated means.
Where technically feasible, we will transmit your personal data directly to the other controller.
(a) is necessary for entering into, or performance of, a contract between you and us;
(b) is authorised by EU or a member state law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(c) is based on your explicit consent.
Where we engage in automatic decision-making or profiling in connection with a contract between us or further to your explicit consent, we implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention from us in the course decision-making process, and the opportunity to express your point of view and to contest the decision.
NeoPR is committed to protecting the privacy needs of children and we encourage parents and guardians to take an active role in their children’s online activities and interests. NeoPR does not knowingly collect information from children under the age of 16 and NeoPR does not target its Website or any of its services to children under the age of 16.
NeoPR is committed to protecting the information you provide us. To prevent unauthorized access or disclosure, to maintain data accuracy, and to ensure the appropriate use of the information, NeoPR has in place appropriate technological and operational procedures to safeguard the information we collect.
Call us: +44 (0)1296 733 867
Email us: PRworks@neopr.co.uk
Reach us in person or by mail: Verney Junction Business Park